瀏覽代碼

HPCC-24253 Fix service account api/role permissions

Signed-off-by: Jake Smith <jake.smith@lexisnexisrisk.com>
Jake Smith 5 年之前
父節點
當前提交
a3f90fa56f
共有 1 個文件被更改,包括 6 次插入10 次删除
  1. 6 10
      helm/hpcc/templates/service-account.yaml

+ 6 - 10
helm/hpcc/templates/service-account.yaml

@@ -9,16 +9,12 @@ kind: Role
 metadata:
   name: hpcc
 rules:
-  - apiGroups:
-      - "batch"
-    resources:
-      - jobs
-    verbs:
-      - get
-      - create
-      - list
-      - delete
-      - watch
+  - apiGroups: [ "" ] # core API group
+    resources: [ "pods" ]
+    verbs: [ "get", "list" ]
+  - apiGroups: [ "batch" ]
+    resources: [ "jobs" ]
+    verbs: [ "get", "create", "list", "delete", "watch" ]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding